Employee receives caution for obtaining and attempting to sell medical records26 June 2026Data Protection Act and GDPR Solicitors